{"ip":"187.19.173.230","total_events":85,"verdict":{"verdict":"probing","label":"Low-level probing","detail":null,"confidence":"low","network_type":"residential ISP","why":["85 event(s), fewer than 10 distinct ports, no exploit payloads.","Not in any known-scanner range.","Sent 18,355 bytes despite few ports and no known exploit path: focused interaction with one service, worth a look."],"engagement":{"level":"payload","label":"Sustained payload","detail":"18,355 bytes sent","bytes_sent":18355,"session_seconds":0,"persistent":false}},"first_seen":"2026-09-04T21:32:45","last_seen":"2026-09-04T23:25:10","events_24h":0,"events_7d":85,"geo":{"country_code":"BR","country_name":"Brazil","region":"Alagoas","city":"Maceió","lat":-9.6658,"lon":-35.7353,"asn":28126,"org":"BRISANET SERVICOS DE TELECOMUNICACOES S.A"},"source_domain":"187-19-173-230-tmp.static.brisanet.net.br","known_scanners":[],"scanner_tag":{"key":"peeringdb:as28126","label":"Brisanet Servicos de Telecomunicacoes","category":"isp","url":"https://www.peeringdb.com/asn/28126"},"cve_matches":[],"malware":[],"top_ports":[{"port":39131,"proto":"tcp","label":"","count":85}],"fingerprints":{"ssh_hassh":[],"tls_ja4":[],"tls_ja3":[],"ja4h":[]},"fingerprint_peers":{},"user_agents":[],"timeline":[{"date":"2026-09-04","count":85}],"recent_events":[{"timestamp":"2026-09-04T23:25:10","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW160N-avIicby!4!f3","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d55573136304e2d617649696362792134216633","method":"","user_agent":"","ja3":"","session":"f4e3daf9-4a9e-4eec-b83e-a4ebba7cc0d1","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":14,"enriched":{"digest":"4c9bc87ca560636e","strings":["BitTorrent protocol","<-UW160N-avIicby!4!f3"]}},{"timestamp":"2026-09-04T23:23:59","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"̜a\u001b�z��E�ݽ�2�`y—�.ۘ�I����D�,\u001f˞uLAE��AY�x�Q�,:gf\u001d�����$��9�Ap�1V|��)I�\u00107,��ts3\u000b��_嶚Rî�\u0019��}HlJ���/۬��E\u001b��\u001b��\u000f�:L\u0003�eu����YR�Vۿ5�Ϳ\u0005��㮞�\u000b��\u0005G���>��A�\u0000\u0011�bk*G�T���_�}\u0011<\\\u0007\u0000L5^��\u001b��1�/���a��\fAfP�g�&\u0001�����g�>q6�\u0002P\u0004�(�Z\r2","payload_hex":"cc9c611bcb7aec8645e9ddbd8332aa6079c297a72edb98da49a4a795ec44aa2c1fcb9e754c414594ec4159cf78b951882c3a67661d858cb7c5ec24f1a139984170b031567cbb962949d310372c9bee7473330bc5d25fe5b69a52c3aef219aba17d486c4aacb5bb2fdbaca1c4451bb0cc1ba89b0fdf3a4c03cd6575bafaf98a5952b256dbbf35a7cdbf05acece3ae9eb80b93c70547d2e9893ec5c841ed0011a9626b2a47ee548cc4e55fbd7d113c5c07004c355ebccf1bfaaf31832ff485f8619ef30c416650e3679026019dbf859afe67933e7136c7025004cc28f75a0d32","method":"","user_agent":"","ja3":"","session":"128509b4-5014-42c1-861d-efd6dd1f7d0d","seq":1,"duration_ms":100,"bytes_in":223,"bytes_out":14,"enriched":{"digest":"b649f12efa53b863","strings":["uLAE",",:gf","}HlJ","bk*G"]}},{"timestamp":"2026-09-04T23:22:28","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW160N-sdQCk.eTxLTn","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d55573136304e2d736451436b2e6554784c546e","method":"","user_agent":"","ja3":"","session":"cb82e33c-46ef-4abb-851c-432d24e4be6c","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":14,"enriched":{"digest":"b2efdbc8f6995388","strings":["BitTorrent protocol","<-UW160N-sdQCk.eTxLTn"],"iocs":{"domains":["uw160n-sdqck.etxltn"]}}},{"timestamp":"2026-09-04T23:21:16","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"�\u001e�\u0004��\n�v��`Ŝ���s���v\u001a�\u001f�jRSt�R_T\u001c�\u0003?j8?�\\\u0015�\u0005¾w���CiQm\fe�}\u0014�\u001a��2x��z\u0004�:-s�ȞvYF�Vl�\"���ۻHe��d¹:Ӭ��)\u0018\u0002\u0017o�\u001eJ�\u001b�\b'��ӝ*�\u0017��\tƛ��r�Ю/\u0016�ͬ~+���R��i�I\r�R���l\u00031Os�����^C��\u0004��o�~$Ji5媒6\r�:M�ϽIe�M��\u0001���w\n\u001f\"���28�N��¥6 \"\u0012P����?��p�1\u0005/���\n�ҤC�[�Vᾑ�\u001b\u0015\r�͐^:�\u001b �NG��\t��䔋^�f�q$I\"��1�:���z�Ղ��W��\u0014��f�\u001b�@r\u000b���N\u0006Sɬ�h,�s�\u0016�Gz�gv���XJ���bE \u0013B���`g�\u0017��\u001f�&ވ�AG8tX��ՋI�\u0015e\u001d��c�\u0006�H���4���\b\rԅ� 0�myhV�6!��������h�i\u0003�K�\u0011؁�z�;��\u001b�\u001e[w6y��B�T��b/���p)�\u0001u�f�𰶊�i��ri�\u0013o\n\"��˟���ڵ�\u00007\u0018�HOk\u00130T�jo�D�G\u001b獻Yq\u0019��B�ܟ�@�再��,AĖ\u0016�����tV�(i�d�\u0013a�.x���,�XBk\u0011\u0006���[�\u000e\b<d\\Fz7�ݰ'=jKzO��\u0011\fu\tm+�f:�eK�P�RhG���4\u0017\u0003$�S","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"aee374f0-bdf5-4216-bda4-1099e538d9a8","seq":1,"duration_ms":100,"bytes_in":600,"bytes_out":14,"enriched":{"digest":"9e9ff5ce837f1e1f","strings":["jRSt","?j8?","CiQm","~$Ji5","q$I\"","AG8tX","myhV","[w6y","<d\\Fz7","'=jKzO"]}},{"timestamp":"2026-09-04T23:19:44","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW160N-zmVw5V1plh_s","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d55573136304e2d7a6d5677355631706c685f73","method":"","user_agent":"","ja3":"","session":"b98956f6-ddf4-4c05-825b-5aaec508ec9a","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":14,"enriched":{"digest":"de0d6f0785b6c841","strings":["BitTorrent protocol","<-UW160N-zmVw5V1plh_s"]}},{"timestamp":"2026-09-04T23:18:32","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0011��_-��\u0015\u0000D-�J|=��c�g\"�<�\u0002Jt��}�\u001c��4��\u0006B\u0007���*N\u001d��0�7�!`\u000f\r9lm��\u0005���\u000f�zp�\u0010�1L�&{\u0007�C$���#l!u���ۆ@�_S�Y���\u00032!E`,�k�}S���@R�U2\r�\u0005�#&�d��\\���'��MG,m�����?��&�fؤ�t\u000bS2�����\u0011q���i�Q6\u0016\u0012\u0017r\u0015#�֣k\n�i�Z4D��o\u001fR�,�r�J\u0014��\u0017���%\u0015�Nd�\u001f9���H�/$R�KkE�knf�͆*\u0012���\u0005���","payload_hex":"11b9f75f2dad971500442db74a7c3d84c1638f6722b93cba024a747f8fb37deb1cc8d934e9dc064207a98fb02a4e1d8af930f037be21600f0d396c6dddea059ba6d00fb17a70a310b7314cac267b079c4324adbba5236c2175b8a1c8db8640805f53ab59afcbf203322145602c846b847d53f5e69540529e55320dab05cf2326e664c5e45ceda39027c1d34d472c6dfdbb929de23fed9626b966d8a483740b5332a5b5e0a9ca1171b7bc8869a15136161217721523f8d6a36b0aa369e25a34449f906f1f52c22cfb72c84a14969a1796a3912515bd4e64e71f39b2cfcd48c62f2452a84b6b45e66b6e6690cd862a12e8dbfd05b484cc","method":"","user_agent":"","ja3":"","session":"5269668e-7eb4-40ce-9ce3-611970bf5c85","seq":1,"duration_ms":100,"bytes_in":246,"bytes_out":14,"enriched":{"digest":"7a21544ad2de3578","strings":["#l!u","2!E`,","MG,m"]}},{"timestamp":"2026-09-04T23:17:00","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW160N-.3g4mO7YNfr(","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d55573136304e2d2e3367346d4f37594e667228","method":"","user_agent":"","ja3":"","session":"0a3ecb1f-c579-4711-a3c4-870c3357224a","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":14,"enriched":{"digest":"866e13d1f2b4c48f","strings":["BitTorrent protocol","<-UW160N-.3g4mO7YNfr("]}},{"timestamp":"2026-09-04T23:15:48","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0005�w�h���i\u0003*W\u00067�n�|6:����q�c�8\u0006��\t�;�R��59\u0019B9r\u0012�kve�_Q�E}W�\u001c~����dR��\b<?6�+����\n�g�N�@�?^���\u0017�;r����Mo�௥�K�����j�\u0015\u001a�\u0011[\u0015\n\u0004�l�+KMW�\u001b�`X\u0019�Y���\fr\"X��`O\u0002m\u001b�TP�\u001a���y�B�\u0013�Ԥ'Ƭ�l�0������<l��9��\f4�g�L�2Y���\u0001�����\\���x]�{���K����\u0004�\u0007\bl\u0003-\u001bV��01<U[�Q\u0010aD��\u0015\u000e�\u001f��\u000b\u000f!g�xfٻ�\u0018m��ZG���\u0002\u0014��\u0011i��v,��nC\u0011���\u0019�5��)���\u0015kCS��y���������\u000e��I�i,�B\u0012��b��\u001f�;��\u0019�\u0010/�}(�E(Q�\rN%\u0016܂�ޞOm\r\u001c\u0018�\u0010��c���z�LÓi2\u0018��q��\t����.r%Z\u0015��\r^���\u000e\u000e�!C��\u0007�@�\t4\u0012H&\u0019\u001b�����$&�k��`v�g�\u00130��\\�","payload_hex":"059077d368b1eeea69032a5706378e6ea57c363aa5b5ead871ca63c2380680fc09d23bfb528ef3353919423972129e6b7665f55f5189457d57ef1c7ebe8d97d4645293aa083c3f36a42be8ffcde70a9e67da4e8840f33f5efbe9cf17e83b72c3f4cfef4d6fcde0afa5bb4bbef1ece5dc6ac8151aaa115b150a04e06cd22b4b4d57ea1bfb605819c559d3d5da0c722258819b604f026d1bcd5450d37f1a86dc7f9f79b342d713d4d4a427c6acc46cae30a3d9dce3a0fe3c6cfea839a1f30c34ba67c14cba32599d9f8a01f1c5d5f5995cbf8bd8785dce7bf7edce4bfdac90ab04a607086c032d1b56a8f330313c555bd151106144f6c2150ec11f84830b0f2167da7866d9bb9a186d93955a47fbb88802148eae1169ded2762cfebc6e4311f1fdb019aa35d7c529e1ddfe156b4353b3d379b8fb9283f6cbf68ffb0e92b949b7692ce74212d1e562e8821fc93b96d719b4102fe67d2894452851cd0d4e2516dc828ede9e4f6d0d1c18f610c09063f7bea37adf4cc393693218c5ef719d9309acbf9da02e72255a15d1de0d5e9dc2ef0e0eb72143f48307fd40bf0934124826191bfc8591b5dd2426e76bbb9e6076a667e01330a2945cd1","method":"","user_agent":"","ja3":"","session":"c3cf9806-492c-485c-936b-def9bd180213","seq":1,"duration_ms":100,"bytes_in":438,"bytes_out":14,"enriched":{"digest":"3b89246d2c5dfa76","strings":["+KMW","01<U[",".r%Z"]}},{"timestamp":"2026-09-04T23:14:18","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW160N-y74(1QJ78HGU","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d55573136304e2d7937342831514a3738484755","method":"","user_agent":"","ja3":"","session":"cdf08884-d08a-4da7-9124-4274c8d78b0f","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":14,"enriched":{"digest":"655d74614f143aa2","strings":["BitTorrent protocol","<-UW160N-y74(1QJ78HGU"]}},{"timestamp":"2026-09-04T23:13:05","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"@Un�B�4@��g\u0007q�����˧\u0019�\u0011\u0018�љY�́�D.ۺ����-��k�-��Y\r�\u0006-��8��\u0005���\u0016.\u0004��\u0014`ļ\u001a�������fv�k���{�����;Džݏ�\u0000l��b���\u0006���\fY+�R՟�\u0014��nd�\u0017<�N�\u0013T�\u0014u\u001a��_k�|6~�{��E������1[cx\u0014v\nX��qҥ��A\u0013J�j\u0002|\u001fm���\f�ƛ�i|��Ʈ�g\u001f���)\u0002�O��5�>\u001ck�o�Z7g1\"\u0004��Ia\\��\u001a���ɑ���\u0019O��,z`�uƜ��et�Fuwr��S;\u0018n����Ɨ�5����U,{ߪ[y\b\n<r�Q)�\u0014�X��\u0001��T�\u0002\u0001>1JN-^�h����!>�q\b�4�g����(\u001ct��ʡ�BTY�!��\u0010���$\u0002:?[��C;��\\�tpd���(�EƤ[\u0015Գ:�]}��93U\u0011̤����\u0017�I\u0010�\f��i� no�H��a��$-Nz,�\u000f\u0014��S���X����C+L��\u001c���α� q�=<�M�};m�`p\u0012G��=�\u0004V>\u001d+p,��3c%�S1\u000b�\u001a(\u0004\u000b\n�}�l�\u0019��3�)�Sn\u0003�p]�3��y\u001a���B�2\u0017h��J�\u000e ��","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"576eddc8-1490-443e-bb59-40d7b40d1caf","seq":1,"duration_ms":100,"bytes_in":520,"bytes_out":14,"enriched":{"digest":"af57bb4d9e3faf02","strings":["1[cx","Z7g1\"","Fuwr",">1JN-^","$-Nz,"]}}],"http_methods":[],"distinct_ports_total":1,"top_paths":[],"distinct_paths_total":0,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":null,"tags":[],"data_as_of":"2026-09-11T09:52:42.529206+00:00"}